From: Mischa POSLAWSKY <perl@shiar.org>
Date: Wed, 4 Oct 2017 22:34:11 +0000 (+0200)
Subject: login: derive user permissions from .admin file
X-Git-Tag: v2.4~5
X-Git-Url: http://git.shiar.net/minimedit.git/commitdiff_plain/7134dfe52977665aadbd817f85f1f751c3738c04

login: derive user permissions from .admin file

Replaces site-specific name exceptions.
---

diff --git a/auth.inc.php b/auth.inc.php
index ef80ecd..b20331a 100644
--- a/auth.inc.php
+++ b/auth.inc.php
@@ -7,7 +7,8 @@ function login($inuser, $inpass = NULL)
 	}
 
 	# find password data by user name
-	$pwfile = sprintf('login/%s/.passwd', strtolower($inuser));
+	$userdir = 'login/'.strtolower($inuser);
+	$pwfile = "$userdir/.passwd";
 	if (!file_exists($pwfile)) return;
 	$usertest = trim(file_get_contents($pwfile));
 	if (!$usertest) return;
@@ -25,7 +26,7 @@ function login($inuser, $inpass = NULL)
 
 	return [
 		'name'  => $inuser,
-		'admin' => !empty($inuser) && strtolower($inuser) != 'lid',
+		'admin' => file_exists("$userdir/.admin"),
 		'auth'  => "$inuser:$authhash",
 	];
 }